daa6b445250f0530e197eb9b0de4c8a3542534bd2b9696fe56c11c6f8a9c7661

Resubmissions

15/07/2026, 19:49

260715-yj4r9agx3v

15/07/2026, 18:40

260715-xbebysfv4v7

Analysis

user interaction
yes
max time kernel
900s
max time network
384s
platform
windows10-2004_x64
resource
win10v2004-20260513-es
resource tags

arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
15/07/2026, 18:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DLS5-INT.exe
Size 170.9MB
Sample260715-xbebysfv4v
SHA256 daa6b445250f0530e197eb9b0de4c8a3542534bd2b9696fe56c11c6f8a9c7661
MD5 a534630373fa10de15338f583b05b65c
SHA1 1c2a03dfcc2d17dfaf3f3fa418b9c22df26c8eff
SHA512 f3018b983da16b8a47c6451c7bab85a878802c8a7f4c2fb60050b07e0bafc18e0d5114ea00af77b246b37cdee9bf947f50986e47c3ad6904f4fd8f276db8ab83
SSDEEP 3145728:CPUhv9oBxe3Je22ijqbXJmZsJ8q2TIlJYoTkEl9O/SbUvUzm:CPs9GeoMKXJfW3IlOo97bUKm
TLSH
T13B883354A345FC2BCF2346B7AB1C0ED4663C0838D656D691F51B3F283EE8369606A35E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 19 IoCs

pid	Process
4628	DLSInstallUtility.exe
4980	DLS5-INT-VINS.exe
1512	vcredist_x86.exe
4628	vcredist_x86.exe
2232	vcredist_x64.exe
948	vcredist_x64.exe
1680	DLSInstallUtility.exe
1868	MCPH.exe
1152	AppConfigEncryptionTool.exe
2488	MCPH.exe
3756	AppConfigEncryptionTool.exe
2824	DLSInstallUtility.exe
2028	MCPH.exe
1504	dpinst64.exe
220	DLSInstallUtility.exe
3140	AppConfigEncryptionTool.exe
3208	AppConfigEncryptionTool.exe
940	MCPH.exe
1560	DLSInstallUtility.exe

Loads dropped DLL 30 IoCs

pid	Process
4680	DLS5-INT.exe
4680	DLS5-INT.exe
4680	DLS5-INT.exe
4680	DLS5-INT.exe
4680	DLS5-INT.exe
4680	DLS5-INT.exe
4680	DLS5-INT.exe
4628	vcredist_x86.exe
948	vcredist_x64.exe
1520	InstallUtil.exe
1520	InstallUtil.exe
1520	InstallUtil.exe
1520	InstallUtil.exe
1520	InstallUtil.exe
1520	InstallUtil.exe
1520	InstallUtil.exe
1520	InstallUtil.exe
1520	InstallUtil.exe
1520	InstallUtil.exe
2824	DLSInstallUtility.exe
3224	InstallUtil.exe
3224	InstallUtil.exe
3224	InstallUtil.exe
3224	InstallUtil.exe
3224	InstallUtil.exe
3224	InstallUtil.exe
3224	InstallUtil.exe
3224	InstallUtil.exe
3224	InstallUtil.exe
3224	InstallUtil.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\DSC\DLS IV\Client\Archives\HS2064E_v1.2AUS.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\HS3248_v1.1EN.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\0060_46.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\0130_13SAF.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\GS2060_v1.13.bcp	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\005E_11NA.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\PC1864_v4.5AUS.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\PC1404_v1.0STND.bcp	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\RF5501_v5.0NA.bcp	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\HS3128_v1.0CE.bcp	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\SCW9057.displayOrder.bin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\HS2064E_v1.3CE.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\HS3248_v1.2UK.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\ConnTypeExcludeOptionIDRanges.sql	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\PC9155V_v1.2EU.bcp	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Client\x86\lmgract_libFNP.dll	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\HS2064_v1.1FRA.bcp	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\HS2128E_v1.3AR.bcp	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\0068_42NZ.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\TL280SM_v5.3.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\HS2128_v1.1C.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\3G2080_v4.0.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\DSC\tblEventFilterRelation.bcp	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\00B2_16.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\0120_13STND.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\SCW9055_v1.3AR.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\PC1864_v4.5C.bcp	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\001E_11BRZ.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\0141_13NZ.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\0120_11FRA.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\HS2032_v1.1FRA.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\001E_11AUS.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\0060_42SAF.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\PC5132_v4.2NA.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\DefaultOptionGroupPermissions.sql	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Database\SQLITE\dlspronet.db	DLSInstallUtility.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\RF5132_v6.0EN.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\IdentityModel.OidcClient.dll	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Client\Tyco.TSP.Common.GUI.dll	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\3G2080_v4.1.bcp	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\HS2064E_v1.2CE.bcp	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\01C7_11.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\0140_11CCC.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\TL260GS_v1.1REV02.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\PC1832_v4.2EU.bcp	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\0130_12C.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\altNewPower.ebuffmap.bin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\RFK5164_v5.43DNA.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Microsoft.WindowsAPICodePack.Shell.dll	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\HS2064_v1.0STND.bcp	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Database\Default Data\HS2016-4_v1.2SAF.bcp	DLS5-INT.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\KYO42E_v1.5.vin	DLS5-INT-VINS.exe
File opened for modification	C:\Program Files\DSC\DLS IV\Client\tlebpzuq.newcfg	DLSInstallUtility.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\005C_A5BRZ.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\SCW9055_v1.0NA.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\SCW9055_v1.0CE.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\TL260GS_v1.13.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\RFK5164_v5.4.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\SCW9055_v1.16AUS.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\HS2128_v1.2CE.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\HS3032_v1.1STND.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\0068_45SAF.com.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\PC1616_v4.2NZ.vin	DLS5-INT-VINS.exe
File created	C:\Program Files\DSC\DLS IV\Client\Archives\HS3128_v1.2SAF.vin	DLS5-INT-VINS.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\DPINST.LOG	dpinst64.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DLS5-INT-VINS.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vcredist_x86.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vcredist_x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	InstallUtil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MCPH.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MCPH.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	msiexec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DLS5-INT.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vcredist_x86.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vcredist_x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MCPH.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	InstallUtil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MCPH.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\dlslauncher	DLS5-INT.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\dlslauncher\URL Protocol	DLS5-INT.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\dlslauncher\shell\open\command	DLS5-INT.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\dlslauncher\shell\open\command\ = "\"C:\\Program Files\\DSC\\DLS IV\\Client\\DLSMDIHost.exe\""	DLS5-INT.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\dlslauncher\ = "URL:DLS Launcher"	DLS5-INT.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\dlslauncher\shell	DLS5-INT.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\dlslauncher\shell\open	DLS5-INT.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\dlslauncher\DefaultIcon	DLS5-INT.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\dlslauncher\DefaultIcon\ = "\"C:\\Program Files\\DSC\\DLS IV\\Client\\DLSMDIHost.exe,0\""	DLS5-INT.exe

Suspicious behavior: EnumeratesProcesses 35 IoCs

pid	Process
4628	DLSInstallUtility.exe
4628	DLSInstallUtility.exe
4628	DLSInstallUtility.exe
4628	DLSInstallUtility.exe
4628	DLSInstallUtility.exe
4628	DLSInstallUtility.exe
4628	DLSInstallUtility.exe
4628	DLSInstallUtility.exe
4628	DLSInstallUtility.exe
4628	DLSInstallUtility.exe
4628	DLSInstallUtility.exe
4628	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
2824	DLSInstallUtility.exe
220	DLSInstallUtility.exe
220	DLSInstallUtility.exe
220	DLSInstallUtility.exe
220	DLSInstallUtility.exe
220	DLSInstallUtility.exe
1560	DLSInstallUtility.exe
1560	DLSInstallUtility.exe
1560	DLSInstallUtility.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	4628	DLSInstallUtility.exe
Token: SeShutdownPrivilege	4880	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4880	msiexec.exe
Token: SeSecurityPrivilege	4776	msiexec.exe
Token: SeCreateTokenPrivilege	4880	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4880	msiexec.exe
Token: SeLockMemoryPrivilege	4880	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4880	msiexec.exe
Token: SeMachineAccountPrivilege	4880	msiexec.exe
Token: SeTcbPrivilege	4880	msiexec.exe
Token: SeSecurityPrivilege	4880	msiexec.exe
Token: SeTakeOwnershipPrivilege	4880	msiexec.exe
Token: SeLoadDriverPrivilege	4880	msiexec.exe
Token: SeSystemProfilePrivilege	4880	msiexec.exe
Token: SeSystemtimePrivilege	4880	msiexec.exe
Token: SeProfSingleProcessPrivilege	4880	msiexec.exe
Token: SeIncBasePriorityPrivilege	4880	msiexec.exe
Token: SeCreatePagefilePrivilege	4880	msiexec.exe
Token: SeCreatePermanentPrivilege	4880	msiexec.exe
Token: SeBackupPrivilege	4880	msiexec.exe
Token: SeRestorePrivilege	4880	msiexec.exe
Token: SeShutdownPrivilege	4880	msiexec.exe
Token: SeDebugPrivilege	4880	msiexec.exe
Token: SeAuditPrivilege	4880	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4880	msiexec.exe
Token: SeChangeNotifyPrivilege	4880	msiexec.exe
Token: SeRemoteShutdownPrivilege	4880	msiexec.exe
Token: SeUndockPrivilege	4880	msiexec.exe
Token: SeSyncAgentPrivilege	4880	msiexec.exe
Token: SeEnableDelegationPrivilege	4880	msiexec.exe
Token: SeManageVolumePrivilege	4880	msiexec.exe
Token: SeImpersonatePrivilege	4880	msiexec.exe
Token: SeCreateGlobalPrivilege	4880	msiexec.exe
Token: SeDebugPrivilege	2824	DLSInstallUtility.exe
Token: SeDebugPrivilege	220	DLSInstallUtility.exe
Token: SeDebugPrivilege	1560	DLSInstallUtility.exe
Token: SeShutdownPrivilege	4976	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4976	msiexec.exe
Token: SeCreateTokenPrivilege	4976	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4976	msiexec.exe
Token: SeLockMemoryPrivilege	4976	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4976	msiexec.exe
Token: SeMachineAccountPrivilege	4976	msiexec.exe
Token: SeTcbPrivilege	4976	msiexec.exe
Token: SeSecurityPrivilege	4976	msiexec.exe
Token: SeTakeOwnershipPrivilege	4976	msiexec.exe
Token: SeLoadDriverPrivilege	4976	msiexec.exe
Token: SeSystemProfilePrivilege	4976	msiexec.exe
Token: SeSystemtimePrivilege	4976	msiexec.exe
Token: SeProfSingleProcessPrivilege	4976	msiexec.exe
Token: SeIncBasePriorityPrivilege	4976	msiexec.exe
Token: SeCreatePagefilePrivilege	4976	msiexec.exe
Token: SeCreatePermanentPrivilege	4976	msiexec.exe
Token: SeBackupPrivilege	4976	msiexec.exe
Token: SeRestorePrivilege	4976	msiexec.exe
Token: SeShutdownPrivilege	4976	msiexec.exe
Token: SeDebugPrivilege	4976	msiexec.exe
Token: SeAuditPrivilege	4976	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4976	msiexec.exe
Token: SeChangeNotifyPrivilege	4976	msiexec.exe
Token: SeRemoteShutdownPrivilege	4976	msiexec.exe
Token: SeUndockPrivilege	4976	msiexec.exe
Token: SeSyncAgentPrivilege	4976	msiexec.exe
Token: SeEnableDelegationPrivilege	4976	msiexec.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 4680 wrote to memory of 4628	4680	DLS5-INT.exe	95
PID 4680 wrote to memory of 4980	4680	DLS5-INT.exe	96
PID 4680 wrote to memory of 1512	4680	DLS5-INT.exe	97
PID 1512 wrote to memory of 4628	1512	vcredist_x86.exe	98
PID 4680 wrote to memory of 2232	4680	DLS5-INT.exe	99
PID 2232 wrote to memory of 948	2232	vcredist_x64.exe	100
PID 4680 wrote to memory of 1680	4680	DLS5-INT.exe	101
PID 1680 wrote to memory of 1520	1680	DLSInstallUtility.exe	102
PID 1680 wrote to memory of 1868	1680	DLSInstallUtility.exe	105
PID 1680 wrote to memory of 1152	1680	DLSInstallUtility.exe	107
PID 1680 wrote to memory of 3756	1680	DLSInstallUtility.exe	110
PID 4680 wrote to memory of 4880	4680	DLS5-INT.exe	111
PID 4680 wrote to memory of 2824	4680	DLS5-INT.exe	113
PID 4680 wrote to memory of 1504	4680	DLS5-INT.exe	115
PID 4680 wrote to memory of 220	4680	DLS5-INT.exe	116
PID 220 wrote to memory of 3224	220	DLSInstallUtility.exe	117
PID 220 wrote to memory of 3140	220	DLSInstallUtility.exe	119
PID 220 wrote to memory of 3208	220	DLSInstallUtility.exe	120
PID 4680 wrote to memory of 1560	4680	DLS5-INT.exe	122
PID 1560 wrote to memory of 4976	1560	DLSInstallUtility.exe	123

C:\Users\Admin\AppData\Local\Temp\DLS5-INT.exe
"C:\Users\Admin\AppData\Local\Temp\DLS5-INT.exe"
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:4680
- C:\Program Files\DSC\DLS IV\DLSInstallUtility.exe
  "C:\Program Files\DSC\DLS IV\DLSInstallUtility.exe" /StopClient /StopStandaloneUpdater /StopServices /UninstallServices
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:4628
- C:\Program Files\DSC\DLS IV\DLS5-INT-VINS.exe
  "C:\Program Files\DSC\DLS IV\DLS5-INT-VINS.exe" /S
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  PID:4980
- C:\Program Files\DSC\DLS IV\vcredist_x86.exe
  "C:\Program Files\DSC\DLS IV\vcredist_x86.exe" /passive /norestart
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:1512
- - C:\Program Files\DSC\DLS IV\vcredist_x86.exe
    "C:\Program Files\DSC\DLS IV\vcredist_x86.exe" /passive /norestart -burn.unelevated BurnPipe.{5F4D53F2-763A-4C9F-B254-115A42A3809E} {914483C1-B151-4011-85F1-B3374C9EC3B7} 1512
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    PID:4628
- C:\Program Files\DSC\DLS IV\vcredist_x64.exe
  "C:\Program Files\DSC\DLS IV\vcredist_x64.exe" /passive /norestart
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2232
- - C:\Program Files\DSC\DLS IV\vcredist_x64.exe
    "C:\Program Files\DSC\DLS IV\vcredist_x64.exe" /passive /norestart -burn.unelevated BurnPipe.{FCD40DD4-0A7B-41C2-82FE-4937B5B24308} {FDD4886F-F679-49B0-AFD8-7443165A57C3} 2232
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    PID:948
- C:\Program Files\DSC\DLS IV\DLSInstallUtility.exe
  "C:\Program Files\DSC\DLS IV\DLSInstallUtility.exe" /InstallServices
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:1680
- - C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
    "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe" /LogFile="C:\ProgramData\DSC\DLS\LogFiles\ServiceInstallation.log" "C:\Program Files\DSC\DLS IV\Client\DLSMDIHost.exe"
    3⤵
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    PID:1520
- - C:\Program Files\DSC\DLS IV\MCPH\MCPH.exe
    "C:\Program Files\DSC\DLS IV\MCPH\MCPH.exe" -i
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:1868
- - C:\Program Files\DSC\DLS IV\Client\AppConfigEncryptionTool.exe
    "C:\Program Files\DSC\DLS IV\Client\AppConfigEncryptionTool.exe" /e "C:\Program Files\DSC\DLS IV\Client\DLSMDIHost.exe"
    3⤵
    - Executes dropped EXE
    PID:1152
- - C:\Program Files\DSC\DLS IV\Client\AppConfigEncryptionTool.exe
    "C:\Program Files\DSC\DLS IV\Client\AppConfigEncryptionTool.exe" /e "C:\Program Files\DSC\DLS IV\Client\DlsUpdateServiceWrapper.exe"
    3⤵
    - Executes dropped EXE
    PID:3756
- C:\Windows\SysWOW64\msiexec.exe
  msiexec.exe /quiet /x {BDFC87C2-C474-473E-A9E1-67DBF3726E9F}
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  PID:4880
- C:\Program Files\DSC\DLS IV\DLSInstallUtility.exe
  "C:\Program Files\DSC\DLS IV\DLSInstallUtility.exe" /ConfigDatabaseSQLITE /CreateDatabase /ConfigDatabaseSQLITE
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in Program Files directory
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:2824
- C:\Program Files\DSC\DLS IV\Client\dpinst64.exe
  "C:\Program Files\DSC\DLS IV\Client\dpinst64.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  PID:1504
- C:\Program Files\DSC\DLS IV\DLSInstallUtility.exe
  "C:\Program Files\DSC\DLS IV\DLSInstallUtility.exe" /WorkgroupModeOff
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:220
- - C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
    "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe" /LogFile="C:\ProgramData\DSC\DLS\LogFiles\ServiceInstallation.log" "C:\Program Files\DSC\DLS IV\Client\DLSMDIHost.exe"
    3⤵
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    PID:3224
- - C:\Program Files\DSC\DLS IV\Client\AppConfigEncryptionTool.exe
    "C:\Program Files\DSC\DLS IV\Client\AppConfigEncryptionTool.exe" /e "C:\Program Files\DSC\DLS IV\Client\DLSMDIHost.exe"
    3⤵
    - Executes dropped EXE
    PID:3140
- - C:\Program Files\DSC\DLS IV\Client\AppConfigEncryptionTool.exe
    "C:\Program Files\DSC\DLS IV\Client\AppConfigEncryptionTool.exe" /e "C:\Program Files\DSC\DLS IV\Client\DlsUpdateServiceWrapper.exe"
    3⤵
    - Executes dropped EXE
    PID:3208
- C:\Program Files\DSC\DLS IV\DLSInstallUtility.exe
  "C:\Program Files\DSC\DLS IV\DLSInstallUtility.exe" /UninstallUpdater
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:1560
- - C:\Windows\system32\msiexec.exe
    "C:\Windows\system32\msiexec.exe" /quiet /x {34A0B403-9953-40F3-B1C2-7E8662FA9077}
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4976

C:\Program Files\DSC\DLS IV\MCPH\MCPH.exe
"C:\Program Files\DSC\DLS IV\MCPH\MCPH.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:2488

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4776

C:\Program Files\DSC\DLS IV\MCPH\MCPH.exe
"C:\Program Files\DSC\DLS IV\MCPH\MCPH.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:2028

C:\Program Files\DSC\DLS IV\MCPH\MCPH.exe
"C:\Program Files\DSC\DLS IV\MCPH\MCPH.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:940

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1i0d2o4y.newcfg

Path C:\Program Files\DSC\DLS IV\Client\1i0d2o4y.newcfg
Size 143KB
SHA256 e486ffb7f026fdcb22081c3719b36810b8c3b14d10a7942da1154a2eac72557b
MD5 8bef4db6b531664249654f60b79b95cf
SHA1 f7e0c2dd1198a8b9266be794bd284138220f22e1
SHA512 830be45b6892d3862dea448fd8160bbfd279deb83f14d0e3ddfc5bce974292f9d0f786d6c6a61f83ae02a1ba23b6c2540202c0d21afc51a1181331b7afb4ceab
SSDEEP 3072:mEdLxpSaZ9dk1TYw5n7wBGoNQQ6am60K68WmMU2UELyziCOjUZXrha60B2:nlTSCdSV7aGoNF6am60K6/DUpHF0I
TLSH
T12AE3CF2AD6D7DA62873356336F332D6C163987AFB10A9000B12E366A5F35D9D0393397
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4nvti2bf.newcfg

Path C:\Program Files\DSC\DLS IV\Client\4nvti2bf.newcfg
Size 89KB
SHA256 c79aacd3ca17d85975fc5eaf5204f742eac91a1f8700588332bd06fcb0d137c2
MD5 b17f7543719b6e33607825a69355cb28
SHA1 5bd517657b426200119673f15dea22e10d897d31
SHA512 47f4a90a7edfde286c213f596d3ccec7dd33d0a44b1bc414aeb6f41de2627dc6d3994b43c8c4bb857ed10a1d5a2661f458b4637aea5b82224c14363f986349b6
SSDEEP 1536:72KP+dmisK4M2q9aCpeTO0OHa5LUBUA//gr+50Pb7:LwaMfNYO0OHa0/m+5OP
TLSH
T112938737BE958C66EF720E2EAD724E18DC3C458FB0480898B56D18A65F7BDD513232C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5zf1catg.newcfg

Path C:\Program Files\DSC\DLS IV\Client\5zf1catg.newcfg
Size 94KB
SHA256 a36dc01b879859146d9bce8a457ba74dca9ecaa0fc04ccd9d7a406b977281b5b
MD5 af3af7eee0360350eae8d23c428f9237
SHA1 7e31ddddd2b6391bea6276afcf79ab6bdb992759
SHA512 cd2c2491604e4f7d626b93204b7cb6a9e290bc07a343a33172bd6d77b118f64c5cbc92217c6a10807122deabf279b8fa6540ef9036e63781970d49798ff231f2
SSDEEP 1536:MrZhp9/KP+dmisK4M2q9aCpeTO0OHa5LUBUA//gr+50Pb7:M94waMfNYO0OHa0/m+5OP
TLSH
T11893A637BE958C62EF760E2EAD724E18DC3C458FB0480898B56D18A65F7BDD513232C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppConfigEncryptionTool.exe

Path C:\Program Files\DSC\DLS IV\Client\AppConfigEncryptionTool.exe
Size 29KB
SHA256 f3c999bbe7b416bd9b931fb621dde1e145c30f360f107422cb24c9253ae1b0ef
MD5 0961c77af14266d3bb9f07c7438a3d71
SHA1 fe09cc1c4102a50408d32b9a5b921f7536d843d1
SHA512 b9d5e5b24fcb2b152bb8bf73997bf35817d0a92979274fe303a1e69c4b3dd23541ae07d63a362007f7864bb77632d5e1be0503abd947aa9076b055b87d23505e
SSDEEP 768:tudJIf8iLl+zqlpdcfdRgzgQ408mXzCeuVheYiTV:dPufbgzgQ40Z/7h
TLSH
T126D23B42B25C8963DD793A7516E251211F389202AF22CBDF7E8843D7C6AA3C25F5436F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0060_45NA.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0060_45NA.com.vin
Size 193KB
SHA256 e4e08deb60cc04e6a85d666be6b4fa4d1b6c443ff91c1b0cfdeb2f276407781d
MD5 76cf9f3f2b1c774de77b160966e6f7c0
SHA1 28e26640bed09a4ebef5160fe38db8a1d516c778
SHA512 398a876d7d1e3ed3e70aa07821a1b168860dc472ba48631874439e838ee4c73cd55989d2ca33b728205a6bba4250105fca2bc0e4d51aa344eca929a06a5bf938
SSDEEP 3072:8EIZCsXdoD7eVcT04vApB9qEawjp7U3XDJ/gKqkZLTa6TOCOisyYqcJ:G9fjpA3XFoK/Ta6TjS
TLSH
T14714E747F373A60EE3AC39FE69A44626E78274082F31F7D54626C512C46E543B1A34BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0110_11CCC.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0110_11CCC.com.vin
Size 2.9MB
SHA256 8f5a54de8f858db6d0c839c95c3c86b987af4c75680c8a6162eef8babf0ae595
MD5 98d07829f9ef428330e3147a7c565d3b
SHA1 87b9465a295accddacb6710febc2e5d7c9e89208
SHA512 1b45024ba0166a82f4b353165ce2c5fcc68eb54b8f9a49a9cc296901968da2933a077690285b462ac5f46306ff5a0a3e56380c55fcd3cf2b589752a63a4e10dc
SSDEEP 24576:Z4Wo4zSgsuHo9b32plyTQ+Rc/Pk1KiF0fJOrwgcupScCN:WgzSgsu5
TLSH
T1C5E56B52AE63D60287FDE477F6B82B2B0A4BB50AD0D65845EEDE47E1D4DDB202C07813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0110_12CCC.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0110_12CCC.com.vin
Size 3.5MB
SHA256 0647b2e690a1c2ba98a98d516b2f2621a3447c5792cfec10364968a5cd31f8d9
MD5 3d3146941bcb0bf4c9d7206b1953dc14
SHA1 72565bc9966bd465434d81d244aa75df50ceb25d
SHA512 e0f5e11f027374b57379c55d500ad18c38ffd9b4b662c7b93581e712fd11c5d815f646ae5899589ba77c2948c22232b45235e3af9c7fd4baafec3a84a1c4e733
SSDEEP 24576:qNVd8YrZ4kaYaMFrH8fCSYsJnvCbrQpkX/g1is/exBmDY0zWx3cNioRtTcupScCK:odrxaMFrcfCSYsJtX
TLSH
T1FAF55C177E33E106E7FFE4BAF5F82B1B8A47B045D0591856FADDC6A1D4EEA215802023
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0110_13UK.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0110_13UK.com.vin
Size 3.5MB
SHA256 66d7c88f92e5c272fe607f8b6740250604a159763b4d84a299c1d29ff8abaa93
MD5 a51f0036c41f083f62809cf1780dd7de
SHA1 68fe1671204b7a5a33159e38c722f06ea95253f8
SHA512 c0e0f1f27838897a6ee1b4c51d966c73b428198ac71a944990dc8fdf68efb03bb92b5688c11887d31bef5fc95036dc5590f335d8c611cf1e4813021af9d562d5
SSDEEP 24576:enw81d8YJMAMFrH8fCSys6nvCbrQpkX/g1is/exBmDY0zWx3cNiLRNTcupScCn:yhJMAMFrcfCSys68k
TLSH
T19DF54B13BE33E106E7FFE47AF5F82B1B8A47B045D0591856FADDC6A1D4EEA215802123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0120_11BRA.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0120_11BRA.com.vin
Size 2.9MB
SHA256 2a7bf0117d5bdd5934d1c893e4a92130077e40f163ac1c5251f7d21fc3ea81ec
MD5 0830043a47d9ef834822fb857833fd87
SHA1 a032fdfd2b5181164cd9cefe9ad9bfa9201f86d3
SHA512 6702c50d786055c627d7c546c0c1db6bc6b8de2aef2b7d5244b1729c7a8649b5c08ae4365177dd1a15537d4fe4018d31e5ff559278d959a3aba853ae72e7d2b8
SSDEEP 24576:XU5nKSgsD98xNPWxBmfEGR0vHsNaCp4rZ+r4YcupScCN:E5nKSgsDp
TLSH
T151E56B52AE63D60287FDE477F6B82B2B0A4BB50AD0D65845EEDE47E1D4DDB202C07813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0120_12BRA.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0120_12BRA.com.vin
Size 3.5MB
SHA256 83794cb7d0b5918b7b8445eed6ec436f16c08afc8bc13709426d0b99c12b97e1
MD5 dcfa6879dac64275986da65a559f46ef
SHA1 a9ce62d2847d0c8b6710b5d277a45fbfc8320c46
SHA512 35cfd71663661287aacd1087c351df8bcb6a1d6dee6ace619012545571a2d04acf01dc43ee8a6990bdbe178251b7615acb51a6515c8466f0c895abe6dfc20936
SSDEEP 24576:VfEd8Y36bisyMFrH8fzSYsy1K1CmKeXo4XetfcJ6wLiVFqzACdAzIRLjcupScCK:+d361yMFrcfzSYsyw1
TLSH
T13AF55B13BE33E106E7FFE47AF5F82B1B8E8BB045D0591855EADDC6A1D4EEA215806013
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0120_13CE.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0120_13CE.com.vin
Size 3.5MB
SHA256 289b59ba49b3269f880b84804a3a875163cacd9485cd8398b4eabf0e6e1a3004
MD5 ea87d35fdb19d96ba5a74db1c98058e8
SHA1 4cf60a69cbb273152cbb640347ccee9deb4c823d
SHA512 96e23bcc897e4be50ef6f268829c334fa5453b7833573b64f029c8a328bb5234c1af80246974056f9e7896495ea3f560dae8a0ed71c21e87e93e28cfedd0c77d
SSDEEP 24576:Yi1d8Yh3et1MFrH8fzSysz1K1CmYeXo4XetfcJ6wLiVFqzACdAz1RejcupScCH:7hhm1MFrcfzSyszhT
TLSH
T19CF54B13BE33E106E7FFE47AF5F82B1B8E4BB045D0591855EADDC6A1D4EEA215802123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0128_12UK.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0128_12UK.com.vin
Size 14.6MB
SHA256 fc9d6b98f8f26dd1cb81056fda17292cc48b4a56bb89cb0e520f5252e0805f27
MD5 1f0b6222ee1cd3bd10044b31950dcf8a
SHA1 0b28dbcde588544c461df4c71c983c2b5f7ace74
SHA512 b74e4a819527eab3f62b6590bf241cd6941a7a3dc9061051f706edba8f341afc2209359a969c3a6d4878f24d0a87acd037e3588d98d924a2db255106dae52a75
SSDEEP 49152:KMiAVYhlRPka7bQsdz83DCsRwThFSt/Xpydmk29bv3g3i3S3k333O3q3T3w3h3/I:GI6XseCH
TLSH
T115E65D61FA66DA04BBFFD47ED2F92F328987B00BB55210187F99D793C0BC6685842463
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0130_11BRA.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0130_11BRA.com.vin
Size 2.9MB
SHA256 729fb95acdcb853c9b7c9177dafa42ae6e26b2b95d7da5139df9cbee71f9f6e6
MD5 f28390268022699e806dd26cf2fc4779
SHA1 9593472be10fe6aacca5cddc114794a43e0f8a86
SHA512 109c88b925d1e36f9d982ba465a29b6216d38d16cc21bab5e683c6a1cefaadc00d02bcca46df1a62f70b91bd83d556aae85048dbaed361ba9690743b9c11c275
SSDEEP 24576:NU5nKSgsDN8xKPWxBmfEGR0vHsNaCp4rZ+r45cupScCN:e5nKSgsDH
TLSH
T163E56B52AE63D60287FDE477F6B82B2B0A4BB50AD0D65845EEDE47E1D4DDB202C07813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0130_12BRA.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0130_12BRA.com.vin
Size 3.5MB
SHA256 9dab607fc6effbceda7eeef72dbef35c26966b4bb15f959d61852ce2d34dbcac
MD5 2b19aeaee48d6c5118a4cc962c417679
SHA1 39ecd64d9da52c302c09274a4f1d3b243a16ff01
SHA512 90a40f18a3a040cca4fd134f99e04e553f59ca7f72a7036a5d87f83b24aeeda5773d564d8ac6f604818f8072a8a8eda7462831f008692f61f4cd011fb8817148
SSDEEP 24576:mfEd8Y36bisyMFrH8fzSYsy1KFCmJeXo4XetfcJ6wLiVFqzACdAzIRcdcupScCK:Ld361yMFrcfzSYsyHU
TLSH
T1B6F55B13BE33E106E7FFE07AF5F82B1B8E87B045D0591855EADDC6A1D4EEA215806123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0130_13SAF.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0130_13SAF.com.vin
Size 3.5MB
SHA256 275408bdbe7dd012b266b561e2e80e15d6dd0fc39df35252fb9ba968b7338fb3
MD5 429dbf913956ae42f59b83a71fe6121b
SHA1 113ff75100827f3bb9a0e1b1d56a19a91db96543
SHA512 d8eda14496e6cca926235e43968fc8e62d7007bf450c94b85ac86b165e5cb194694a9399f25620f813eb88dbd9edff606b29fcf5c3dfe3b8ef16c887ac0fd1fe
SSDEEP 24576:hDSd8Y9XsM/WMFrH8fjS8sU1KFCmJeXo4XetfcJ6wLiVFqzACdAzGx/dcupScCn:wh9XsMWMFrcfjS8sUFk
TLSH
T183F54B13BE33E106E7FFE47AF5F82B1B8E87B044D0591855EADDC6A1D4EEA215806123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0131_12BRA.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0131_12BRA.com.vin
Size 3.5MB
SHA256 a30b835abbdaadd58276ea00a52d582e98cb3f3bde75e83652a93de5cfa2eb3b
MD5 e43e41f086ceea7509821b2c5f2921db
SHA1 4534727cd8b4ea786f27cd1f0d23687978ee3aa6
SHA512 0de60a99f74ac0265818b4065b1959f68eeff30c8c7e12f4c794874de1ca8b34de5d1be7764a5cf9d76ab7aa0f112836cceeebc06bdb3ac5592bcd21c8197c0c
SSDEEP 24576:jfEd8Y36bisyMFrH8fzSYsy1KFCmJeXo4XetfcJ6wLiVFqzACdAzIRydcupScCK:Qd361yMFrcfzSYsyHO
TLSH
T1ECF55B13BE33E106E7FFE07AF5F82B1B8E87B045D0591855EADDC6A1D4EEA215806123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0131_13SAF.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0131_13SAF.com.vin
Size 3.5MB
SHA256 43c6aee024825723ff7050ae302fcaffb4bc074a4b0569b166cc527fb85eec4f
MD5 98b3ada6b3fe23d36ba05425d8494b47
SHA1 577493b433b534767cea54b0fc62477b15c17490
SHA512 b4c0f9883c96ca403268b67b14b31fad54044ce5b41fd3df0af946ccd0a69889b4a6844ee8e30172aa5bd7ae7afbd3ecb011f131846dca2605074320a55181bc
SSDEEP 24576:2DSd8Y9XsM/WMFrH8fjS8sU1KFCmJeXo4XetfcJ6wLiVFqzACdAzGxLdcupScCn:Xh9XsMWMFrcfjS8sUFg
TLSH
T11CF54B13BE33E106E7FFE47AF5F82B1B8E87B044D0591855EADDC6A1D4EEA215806123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0140_11BRA.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0140_11BRA.com.vin
Size 2.9MB
SHA256 e9bc38875893418095d69b9d84e4b801653cd9a9cf213299fd47e11e36e97607
MD5 245246a9a3a883293db4d1eb086f6f33
SHA1 1abd5d62623f7b0af2ed951b6505c6ae34e12f65
SHA512 e83bc3bfe3ab43a7efbe2ebfc880d931eeca7077c162b375dfcb942d07fcb10f4ccc5ee4484fa3659597f196a7696526eeb211c9043038b44c982a9ebd540d9f
SSDEEP 24576:QU5nKSgsDvo9132plyTQ+Rc/Pk1KiF0fJOrwFcupScC7:Z5nKSgsDy
TLSH
T162E56B52AE63D60287FDE477F6B82B2B0A4BB50AD0D65845EEDE47E1D4DDB202C07813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0140_12BRA.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0140_12BRA.com.vin
Size 3.5MB
SHA256 e05472b46f6c7d3e33b70994be733b945dedf84232da7926d5b6da2180e92a5e
MD5 91d06c576d5a4d6e756889f0409ede54
SHA1 a875bcd9d83bd72d697885ad2bfb78785cfea220
SHA512 d295f27548d2ff85fd0adb5aecad55ff6a6601cfddaa9670d190e03f6efb745b4523127050bd25aa1c2431abee1c81deb4a9e18b7939b52deb62dc387ea8d404
SSDEEP 24576:4fEd8Y36bisyMFrH8fzSYsyRw0br2pkX/g1is/exBmDY0zWx3cNiFRbpcupScCc:hd361yMFrcfzSYsy5N
TLSH
T1D1F55B13BE33E506E7FFE07AF5F82B1B8A87B045D0591855EEDDC6A1D4EEA215806023
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0140_13SAF.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0140_13SAF.com.vin
Size 3.5MB
SHA256 9cfdfb20a2991eb65a63e9b40376dc46d7c836adae84c08b63a6c0c52b983b62
MD5 27d96a155cd75534cfbaed4771a41754
SHA1 819a75a61a30a475abe6609bcbb4b83dca10fbad
SHA512 e4fef4518e3962851889716c5a49ed2af6be6908ba40058a9120b5c5152f402dc5f9ea46b8980712791522f3a7a43fe4f0fcf19eb01428c9bcca363570ccd853
SSDEEP 24576:RDSd8Y9XsM/WMFrH8fjS8sURw0br2pkX/g1is/exBmDY0zWx3cNibxapcupScC1:gh9XsMWMFrcfjS8sUn9
TLSH
T130F55B137E33E506E7FFE07AF5F82B1B8A87B044D05A1855EEDDC6A1D4EEA215806123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0141_12AR.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0141_12AR.com.vin
Size 3.5MB
SHA256 47b54d928e812434202df41a81f7b2b6efdc792cba3358dc0a721136c5e16fe2
MD5 c543dfb0c58e35f7696f32ebb70c8e52
SHA1 4a0468194ada66fb199ffdd25ced54a645bfa750
SHA512 d0bffe72d60509e8222b955184be82190de99e286d6d006cf777b3d02819ce9b7e24dd330beecfd15d801d25b6081a1568b720af5268cbf66fc20e4f43c8d663
SSDEEP 24576:sUEd8Ya9aWrgMFrH8fzSYsJRw0br2pkX/g1is/exBmDY0zWx3cNiFRcpcupScCc:Cda9fgMFrcfzSYsJ5i
TLSH
T129F55B13BE33E506E7FFE07AF5F82B1B8A87B045D0591855EEDDC6A1D4EEA215806023
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0141_13BRA.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0141_13BRA.com.vin
Size 3.5MB
SHA256 8fa699614be86be9aee9efd0e7ed20b3e93e4cd541e9fd5998059d458b3893ac
MD5 a19365287c15d4906910bf8be47cd7e7
SHA1 6de637183701c75585267616b4d1c48f9ee2f5d1
SHA512 17cc8f4bc9e0504c96ebe4687732ff82eb1442e95e1bb3b753106d6731d40582f1b583309852b6d1193b3e42937c08fc54408515993a0ba0af4ab17beb5b36bc
SSDEEP 24576:D51d8Y06NvdwMFrH8fzSysyRw0br2pkX/g1is/exBmDY0zWx3cNiFRNpcupScC1:vh06XwMFrcfzSysy5s
TLSH
T194F55B13BE33E506E7FFE07AF5F82B1B8A87B045D0591855EEDDC6A1D4EEA215806023
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0148_10SAF.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0148_10SAF.com.vin
Size 8.4MB
SHA256 9bbec3c2d6427fff3376de0c16bccfeb5225172ed7a4da5edf9d17901251f53e
MD5 b84af3ac1daa2d40161dabe626e88875
SHA1 73895c30c50aa21edf4acac986714ab25e893cdd
SHA512 4878dda60c37900a5e7993bdf7a7507cc7fba90f85c703a8e3b422f5d94861250e6ca4386b6c7facc70ef481c6f686d9480e585bf1d1518bb300111aab6834bb
SSDEEP 49152:zXWYhGlvlh0CHMFrcfjSOsAFM3h3k3n3M3D3G3O3T3c3x3r3a393I3+3H3Q353tT:zXW6wyCr
TLSH
T158965C61BA36EA04FBEFC47AD2F91F32C987B00BF5975018BF99D693C0786644846463
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0148_11UK.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0148_11UK.com.vin
Size 14.5MB
SHA256 f5da487e8b2f72903eb41c6e05c2e652770c5b49cd330da05b3c5e9dbade2a44
MD5 e2c55b2c182b1cdd281becd92c16f25a
SHA1 a3fa3ce6af221e1cb06eb89a40f8b0d5e294ca63
SHA512 50a27b726cf8eec3302c5f317ef32d830d229f9a2ba16cb8fcbeb2437dcf3617fd6a89cf12fef257f472a0aa62f8d23e87a321ab6ade2a382b5e07a910a5212a
SSDEEP 49152:t3yYhZ1XQ0UKBsdz83DCsRwThFSt/XpydmkISUh3l393j3D3I3Z35303f3W3g3xA:E6/gII
TLSH
T15EE65D61FA66DA04BBFFD47EE2F92F328987B00BB55210187F99D793C07C6685842463
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0148_12UK.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0148_12UK.com.vin
Size 14.5MB
SHA256 b74567715d5d62c341efd8d674cec5bfdbce4e52c29b0895da468b4927572d56
MD5 f6c48e6ae639443481adfc28eb23b4a9
SHA1 38a89145396face76bfcab30c5cccf772e6eb81e
SHA512 dc99683475209a680cad5e23a7bce1de26ae752e798c21635a874e3648eb11e11b00daddb741520c6e9817202b5b991022fa26f6ae0484c63ac2e1237253cd5c
SSDEEP 49152:9MiAVYhlRPka7bQsdz83DCsRwThFSt/Xpydmk2Vbv3g3i3e3k333O3q3T3w3h3/p:jI6XseC6
TLSH
T13FE65D61FA66DA04BBFFD47ED2F92F328987B00BB55210187F99D793C0BC9685842463
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0158_11UK.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0158_11UK.com.vin
Size 14.5MB
SHA256 2a41b6fcdf7e4e4b8f52053025e4e589911c948ef05bd3beb7507d03a62379f9
MD5 ffccfe391433487d170c48f04f4fd755
SHA1 3e23b39b3b8e1435cb19384775ca05b150cabd51
SHA512 4b6a5d0c867e09ba39c445c5694730c0388f77fc9b30926b7f10249dc05b6f259bf4474bf8e5d6ab0898b3d8d2ed2d5bc8c0e626a7f717ccfd369a3204723ec8
SSDEEP 49152:43yYhZ1XQ0UKBsdz83DCsRwThFSt/XpydmkISUh3l393j3D3I3Z35303f3W3g3xi:r6/gIq
TLSH
T171E65D61FA66DA04BBFFD47EE2F92F328987B00BB55210187F99D793C07C6685842463
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0158_12UK.com.vin

Path C:\Program Files\DSC\DLS IV\Client\Archives\0158_12UK.com.vin
Size 14.5MB
SHA256 a3e77253d76a0e4d152de15ecde8ac787de89c9a60c28f0d6ec3ade58bec78fd
MD5 625f50c93429c3ef78689e860a53320a
SHA1 e362e4c755408a70a228cc9eb175fbdaa5603ee7
SHA512 3851c74e1514d2e2fb5f6e6194adf8925f4982e2d182497a1f9f25f85d4a028a2c25a945b8506a5bad2060424fc6b5df6094e02bcf9eca60997bc92e7db53bfc
SSDEEP 49152:8EMiAVYhlxWr4sdz83DCsRwThFSt/Xpydmk2VN3l3Z3e3L3c3B393E3T32303p31:xI6zWl
TLSH
T187E65C61FA66DA04BBFFD47ED2F92F328987B00BB55210187F99D793C0BC9685842463
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default16_1_50.BIN

Path C:\Program Files\DSC\DLS IV\Client\Archives\default16_1_50.BIN
Size 248KB
SHA256 d34275dea5678d9f1c79bdf6b6241c55e7a70d0de774953e1ded1eaa5100fd31
MD5 d4b90a1b4b3c22c7639e282717a470cc
SHA1 d79a76106a1ce17173cf2ab2bd8a9f28e2f554f1
SHA512 85b78db1546c5e6c2f1ff4ad821feafbeb7ee1cb657fcec90b5913e38fcbda3eaaf32a862163ee0b1bd3365a5757e1675b19999a99d78f207977870565a22714
SSDEEP 6144:MiY55555555555555555555555786If7iiixn6o/O:MzIf7iiixn6o/O
TLSH
T1C544C6EC2E4739162B17D2AD100C9102E856324DFCA17D9FC0B6187D2F7F4BA92EE665
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLSMDIHost.exe

Path C:\Program Files\DSC\DLS IV\Client\DLSMDIHost.exe
Size 875KB
SHA256 1b687ef38cc1673da574b5f2c6fb33e771a7fd377a96acb8333a439c81fd7eb9
MD5 aec83c6ed1a50747c928c817dbbd05de
SHA1 661097bb7ae7ddd62725ee291bab4e7b366806b2
SHA512 2419e09090e2f2575a7ac788f294a26f0ebf0194f268b86c0f20035ebdda7e899098d96d7be0731d95e8d402dfa4ce07e8c3d71aeb4b50cf3369149cbf227377
SSDEEP 12288:eN1pTOuiwD2S/FS/wqIG5Jd340N0lJpH6NSHHFjLMMbt:evpquyqEEpH6MHHFnMMbt
TLSH
T16D152852F21CCC42C63936B986CA2500937B5E466F9AC7C9AC9C37EE85F53427D0A64F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLSMDIHost.exe.config

Path C:\Program Files\DSC\DLS IV\Client\DLSMDIHost.exe.config
Size 78KB
SHA256 ff28fd12961de4a7bdef20a012464a9f0cfe9c849d872bb6c7e562f15b6af28f
MD5 2780845fac92439e15fa4ec2ad15b31e
SHA1 0674d5557cc605bb494b356b04ad4145b1563ebf
SHA512 8f0ef8a2c2f2a435840163ccbf624927a383c1533eefb9b90206fe8cb12ab3f42f1401c89a530001bfa85bb9fbf800e27d4cbc86eb1e5c278c3833d471c99307
SSDEEP 768:MTKhE9V5FUcqRzHa/dDeLUBUAOHJujZ3QZa50PbH1:MFW5zHa/dDeLUBUAG6Z3+a50PbV
TLSH
T13583E037BAD04862EE720E2EAD724E19DE3D458FB0481498B56D18A75FBBDD413232C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLSMDIHost.exe.config

Path C:\Program Files\DSC\DLS IV\Client\DLSMDIHost.exe.config
Size 169KB
SHA256 97e2e4c8043dcf0325195757bf0ebea732bcdc48e90ec850488496a80e234ae7
MD5 556850f921f9d9ba37fc3c3f298a8155
SHA1 39f13b1eaab15dd8d1e6f1674a233287d5a6f9fd
SHA512 90dc16a101cd3d4b1b4236156a1465fa93b971591ddd9ea645c5f5255b2d635af3f2b9a03be2d460096f48e034eab65b69517683fbde54b8fd9dbca08e1d949c
SSDEEP 3072:Z9SwaMfNYodLxpSaZ9dk1TYw5n7wBGoNQQ6am60K68WmMULUELyziCOjUZXrha6t:ZkwaMfrlTSCdSV7aGoNF6am60K6/DUof
TLSH
T1B804CF29D6D7FB264317A5336F732E7825318AAE721ED000B11F35295F299AE138335B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DevComponents.DotNetBar2.dll

Path C:\Program Files\DSC\DLS IV\Client\DevComponents.DotNetBar2.dll
Size 5.6MB
SHA256 33ca720156a18de7224c9aa6a164c9eb9394b114a66730d56d3882eb5d6844b7
MD5 b7a0ea0cd94f84fdb771a987e756628e
SHA1 2217575a8938bbfbc00ed5bac923063800ac5f5f
SHA512 f393d030fda0ecf62804552e89f47531327411b561b1cb36039d4af995e974d0ec0ba1af7fcfe19edd7228e2ef2e16fa828d11c3452e8768aef145d1b3cbcc35
SSDEEP 98304:Rt34SoybUGyKAjIgYt9crhPpoPKDzE7mFKk/8:Rt3ToybUGyHIgYt9crhPpoPQzE7o
TLSH
T118462B406BF48A26E1AE87BC9072181643F5F561EB93F32A16F6F2B42D72310DE4D15B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DlsUpdateServiceWrapper.exe.config

Path C:\Program Files\DSC\DLS IV\Client\DlsUpdateServiceWrapper.exe.config
Size 5KB
SHA256 42bc718912f4dd093ff0a333657a28b3db574edc16405b638d2b7ea8c7da3b96
MD5 af46c2567361df41863a8bc538e7d7a0
SHA1 e3a9b8fdd538790acd6483cea9a03e384bf9a6ae
SHA512 dc678c9b19b147ea9d42dc749f92fa09edf3c5a025e9624af5acd3046744e762f574de31d132c3ea6811225ffb30680b6ac40526f9cda10f2b498861c1969228
SSDEEP 96:lwP4HPdB5dSQs7t8Uc/jUcpzrN/bS9YN4prb4:lwPAPdcQSt8Pj3zrg8
TLSH
T194B10E12B5C8AFB28F310AD77D365824CB7E0BA7364C05CDF0ED6A579F6A84611030B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Framework.Configuration.dll

Path C:\Program Files\DSC\DLS IV\Client\Framework.Configuration.dll
Size 20KB
SHA256 c7a9f59e9b2777d3657848f9da040e671c85fca1eaac0a41b762917fd20d965d
MD5 f6d3d8585552ff3a19c773b9d73e0068
SHA1 22646ac7784d8cd7cbc3243261f08f9969d26bf4
SHA512 19ed738ff08d2062a3bfbf13b962a52ed87a1b903c49550e852913981396aea7ec5c0f9c636097150f80a4a1e478bd4c3949d9f63c0e7476ef411217a5871206
SSDEEP 192:Amo7MOgg8QTsN8LhNInxxWmy9tadsaUDN/Tns7awbcKX4jhCJuGtf:rWGJaLhKxRy9taihNTns7amDHzx
TLSH
T19B92E855FB9C8717DEFF27BBA873024102B1E641A4B2E79F8C88510E6CB23548762792
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Framework.DataAccess.dll

Path C:\Program Files\DSC\DLS IV\Client\Framework.DataAccess.dll
Size 56KB
SHA256 3bcea61648dc1ea0cf737dc5f6ebd2b57d39f098ed99f81b98d53b8a93f8d3ad
MD5 5b6ebc97f1bf7140c5fdd37c5dc2cd62
SHA1 5672764e2baaf5958cf887d091760aac78750b1d
SHA512 357dda4a70f7d20caca20617b68bb6fda5d76d8bc3723e6b4e26839918e350baa84069dff45f52e0c6a934e0ba60191f227094b260543a8ebadf092789d74199
SSDEEP 768:+3c680W2Tim0VhKW4Vk3k4iFGBCL9C5aWLSCsu:CNX02W4C3HiFYCLI
TLSH
T1C043F70A33F8C722C9AB077A65B0110507B8B553B517E72A39DCB1A2AB37784691737F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Int.JC2.SiteManagement.Client.dll

Path C:\Program Files\DSC\DLS IV\Client\Int.JC2.SiteManagement.Client.dll
Size 65KB
SHA256 09d309689e4cc952d4f71e44ca4412df4b73d39b880dc12fcdf0b0cb6fb5c3bf
MD5 ff67b92015e73fc0c527302fe0b623c4
SHA1 e1dce2f2a75c7f3431acbb2897d6174195748804
SHA512 623860d2cad4a4f92bccbbaa034d1cfeb7cc9dd4fe4f38418332a267625eb41241b8c0699b5cbdae49769a27df8875cbe6b4f1141a043f48820e082063886909
SSDEEP 1536:5K4ektJVDpuu8gwuILRfsgcZeIv1jxIRpOhvZwMpChZXPSk:5K2JVDpuYgIec1jx2avZRpMZj
TLSH
T1FB63190437ACC63EE2AFABBEBD3542334572F6566563D79D0A4CA4EE28237424548373
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Tyco.TSP.COMMON.dll

Path C:\Program Files\DSC\DLS IV\Client\Tyco.TSP.COMMON.dll
Size 2.3MB
SHA256 a76c8ecbe4a19c79509b612f40ecd89671aeb66d10a398f7ed830797bbdcf745
MD5 c32995c4815feaf5a9dc7de4712826e1
SHA1 fe657263375d371992719fb13b4c5148ce1bab8c
SHA512 89a038fc1650a687ba04ea8468d32452d06067789f0a9a7e046c90bde43d942c3d07139e4988355a57f700eadc06c933127717a9a82b85793cada3b7b2eba32b
SSDEEP 24576:FKe7jhmUIzmnCPFV4wX3EU8QmOsV613JogNbp157jBMRSy+qWnHl:9mJN0U8QmOsV613JogNbp1571rBL
TLSH
T15AB5371AF1BC8911D7B2727ED6DA2723EF74C0805F43870A3E1D979D69A21029F4A71E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Tyco.TSP.Common.GUI.dll

Path C:\Program Files\DSC\DLS IV\Client\Tyco.TSP.Common.GUI.dll
Size 752KB
SHA256 a66fcbe7d3caa32c7de4642d0e3c9d269cc3a79e16f5786d9ed58234c93aaebd
MD5 95e0ea7bd0421cf2b89a901889a168f0
SHA1 12d5537d15c5dc3e8f0ce9b38e219b3f7d6b3ab3
SHA512 b010e4381626d7e26069b07a86eca3e46d806d058976086ca11799cb2ce9e78c800df090e4760e90f7401f5db3c024317113bbfad669aa6cb1c8416613a179df
SSDEEP 6144:B3aelnhzMWKGMJPgyHr8F0zNuQokNhE3pAgFo0h/k000G0J00s000s000s000s02:paSWJPJa+A9o0hp7L
TLSH
T1B7F44043B24DCA01D8F9377E8FDE6411B76A85027F17DB8A2C8927EA99763036C4171E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Tyco.TSP.ConfigProtection.dll

Path C:\Program Files\DSC\DLS IV\Client\Tyco.TSP.ConfigProtection.dll
Size 17KB
SHA256 c383b9f9e9857a299153da8d28f055f1bb55a0d11b72736d4ba61280a6b89559
MD5 f46947d02b8ddfc8971e6e8e7ab69b15
SHA1 b6fba8236f80d5d2ce46395b96ca3f3f9b70ba2d
SHA512 b77b10e60780588eafc29d658ca3e109e675144d274e0901d55c95caa4dab13c34a564cf1ba78e3c2bb7e86bdf8bea7b25913bfa9194585997ebde621c03edda
SSDEEP 384:ptpSpOqt6BB050bySg1hGasI0Lll7l7eQ:skvglsj77r
TLSH
T12372B743F69C9E12C8B67779C9EF50101B789209AF13D75F2CD923EA9C622859F0172E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

be4ypk3g.newcfg

Path C:\Program Files\DSC\DLS IV\Client\be4ypk3g.newcfg
Size 145KB
SHA256 cde8f94ff534d34316300d8634adb7b31e5acc2d164f8e5942c45ff70257d2c2
MD5 50bfef9cbc771070de78014bc3d4cbda
SHA1 d6b1c3fa9a29fc836445648b72e36ccaacec1055
SHA512 184d646dc7deb3c0acff6347b9a0645f14c52780807bba7032e5ae33860109abffb0f536e10310554f8add694bae728a21960e7754ad47726fecb1e13367ec9c
SSDEEP 3072:PAdLxpSaZ9dk1TYw5n7wBGoNQQ6am60K68WmMULUELyziCOjUZXrha60B2:olTSCdSV7aGoNF6am60K6/DUoHF0I
TLSH
T18AE3CF2ED6D7DA62873356336F332D6C163987AFB10A9000B16E266A5F35D9D0393387
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bgyviiga.newcfg

Path C:\Program Files\DSC\DLS IV\Client\bgyviiga.newcfg
Size 144KB
SHA256 bd291df8e3d87b76face2c36b704262b4a57c9e032585597ed0b23f166864893
MD5 7b11dedd3e550ca2dcc25b50e1c81b85
SHA1 2e4623421eede909d04ec99d326f21e5910fc4e4
SHA512 cf5ef1d5abee96855a56b1d336eed3a55baa964e59bba856775ac1e2b66d9d1360e716cea4244d0daa2c7f433515215276d10ff4fddc7bdc237d063d727955f0
SSDEEP 3072:sAdLxpSaZ9dk1TYw5n7wBGoNQQ6am60K68WmMULUELyziCOjUZXrha60B2:5lTSCdSV7aGoNF6am60K6/DUoHF0I
TLSH
T1E5E3BF2E96D7DA618B3356336F332D6C163987AFB10A9000B16E266A5F35D9D0393387
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iabz1yzv.newcfg

Path C:\Program Files\DSC\DLS IV\Client\iabz1yzv.newcfg
Size 150KB
SHA256 2f96fe5b6248102f3769b2fba24d71c12a10785c9eaac90d3086a767445b8981
MD5 69599a3f1dcd00411482d1af5e28137b
SHA1 0b691f20e3905383f5cf49f08cd3c05ca3343bb7
SHA512 ace626a1da0d1738ff260576a2b8cc819d27932feb71e36a7384d56aa205d815fd436f8f2beba793a14752de5825a73bc139fa16b16c4bbfa5de49b5ba83e4f0
SSDEEP 3072:Z9MAdLxpSaZ9dk1TYw5n7wBGoNQQ6am60K68WmMULUELyziCOjUZXrha60B2:ZflTSCdSV7aGoNF6am60K6/DUoHF0I
TLSH
T151E3CF2ED6D2EB62873355336F332E6C5A3987AF710A9000B11E265A1F75DD9039339B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iqlsu2zb.newcfg

Path C:\Program Files\DSC\DLS IV\Client\iqlsu2zb.newcfg
Size 164KB
SHA256 39dc0e5e003eef5c48eb9d959162433956f0852eeda7de5bcdfd29eb1d901a73
MD5 ab92355e00f258749dff744fb6b2262e
SHA1 5334992113e73288318cfc4a7ab4d58964b928a7
SHA512 5e2cfb874a5581674e7625cdf913163525b5f28a77ea549994595d97822e1887163f0ff9ff6fa4f2b53de1bacee932fde3f528f3227dbc5d927547e18ba4b71e
SSDEEP 3072:hwaMfNYodLxpSaZ9dk1TYw5n7wBGoNQQ6am60K68WmMULUELyziCOjUZXrha60B2:hwaMfrlTSCdSV7aGoNF6am60K6/DUoH/
TLSH
T117F3CF2996DBFB26431396336F736D682531876EB21ED000B11F36295F299AE138335F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mnb00bgi.newcfg

Path C:\Program Files\DSC\DLS IV\Client\mnb00bgi.newcfg
Size 6KB
SHA256 a338e4aa240594fef45a838faecf5792a9d2851d4150f1230a30f22257089fb7
MD5 a16701a809a556af34ec03fecfd3af62
SHA1 9ded9d64325a2584da38790ce204703f816449d1
SHA512 050d02dba96a9612478b7aa6f467667ba20fdd3512abfc4a9c0b2ec86e36affed0ef121f4f2b34eb0fb89bfa5203a04f371e00029dc4766197710befe01ef022
SSDEEP 192:owPAPOXPDRwiwQ97nXEja8b3bg7aEqcrg8:o8OCnXEjjbM7Nqf8
TLSH
T104D19611E1C9BFB50BB24EA2BE6BA838CB7903B7394D454CB0DE6A57CF219521243077
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qnipm4qg.newcfg

Path C:\Program Files\DSC\DLS IV\Client\qnipm4qg.newcfg
Size 7KB
SHA256 e83a3715aac8655e012463b3c3dba8793a6a40ef59fd010607eabd3c33c91980
MD5 33b7905f7325f688e8a55eb996cc05b2
SHA1 c09fd2bce75b3199c97ddc5f509c95861119a4fb
SHA512 991be7077e72594428b7cf1034ca43d11fcf043cb542d158cb3fba047b5c63a50aecc64e09d04ab4d48a2cbbc548ccba96c0f8d2f562e3830cdb54e845191cb3
SSDEEP 192:owPAPOXPDRwiwQ97nXEja8b3bg7aEqFXP4tGpPzrg8:o8OCnXEjjbM7NqyaQ8
TLSH
T1EAE19611E1C9BF660B730EA2BE67A934CB7903BB398D454CB0DF2A578F255921203077
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qnwj0ybi.newcfg

Path C:\Program Files\DSC\DLS IV\Client\qnwj0ybi.newcfg
Size 145KB
SHA256 1f937772982e17cf657ae368ec95ef2e6554d4103ad43a2d3f136a132776da89
MD5 bb2488850ce6f12739e0d9cb86b77263
SHA1 5ab2aa29fe71cdda3f26814f5fb4271a91018221
SHA512 ff102100a1dcdc7ee0be889e912fa5a56b0d1e15c56bd881f53cc033ef85e8d5292d86b2fac9894233c3ca4c55e3d1a5d6753a2c2b2ec1bb34007acd7064bde7
SSDEEP 3072:+AdLxpSaZ9dk1TYw5n7wBGoNQQ6am60K68WmMULUELyziCOjUZXrha60B2:PlTSCdSV7aGoNF6am60K6/DUoHF0I
TLSH
T134E3CF2ED6D7DA61873356336F332E6C163987AFB10A9000B16E266A5F35D9D0393387
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

r0od5yra.newcfg

Path C:\Program Files\DSC\DLS IV\Client\r0od5yra.newcfg
Size 94KB
SHA256 02411f680153c64dc0d0799ceaa9875a087af2a69eb134653a36dbea0011db15
MD5 09d2050b67e1d6bc50be670cb6a03214
SHA1 d06b3df075367210dcfead4b63b76e612d67b61e
SHA512 554c5d5c8c7dbb0331c0c4bc54500e1d350f189d4bfa5cfd8e32531d6f520e436cd9ca9e29b818cd48549a7e470d93053204eadb03e5135e126d4bb733c43419
SSDEEP 1536:3rZhp9/KP+dmisK4M2q9aCpeTO0OHa5LUBUA//gr+50Pb7:394waMfNYO0OHa0/m+5OP
TLSH
T1CB93A637BE958C62EF760E2EAD724E18DC3C458FB0480898B56D18A65F7BDD513232C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

s3j4ayn1.newcfg

Path C:\Program Files\DSC\DLS IV\Client\s3j4ayn1.newcfg
Size 7KB
SHA256 f018261e5f4470976c013249d79a6df4d7b4a67fe0872eeda58a0863f4d9b985
MD5 33e08542b7199cddf4d006aff4c28d17
SHA1 1e7ce6f321b93f015ca0c8e2daa3f35965a112b5
SHA512 4fd45502b96866f256f1d51322362fc38bb069e8bddc73008724072923874f003b0a9e016c222e5da4494ba0769a4e3eb4d5c32bd9945eaa985ee0f932060068
SSDEEP 192:o4XP6PAPOXPDRwiwQ97nXEja8b3bg7aEqFXP4tGpPzrg8:oXOCnXEjjbM7NqyaQ8
TLSH
T14BF19611E5C9BF6607730EA2BE57A934CB7903BB398D854CB09F3A578F255921243077
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

w2zygq3t.newcfg

Path C:\Program Files\DSC\DLS IV\Client\w2zygq3t.newcfg
Size 143KB
SHA256 6a3c0cad0abd9b51d2d24e317506a8c3950068be8c41112866baf66f07034687
MD5 25011dcd4c95b90e55f5e5db5c6c535d
SHA1 1f4390d22b60ca4b998bcf267a47b8f24db15be1
SHA512 0a14c1b5e8cf683b5c61342bd72265523a65c1717aeeb070fc5da38ac704c90fadf694d6a3aae103243c9117f0768b868843258b4df2c703180f0b954ee8a514
SSDEEP 3072:lEdLxpSaZ9dk1TYw5n7wBGoNQQ6am60K68WmMU2UELyziCOjUZXrha60B2:WlTSCdSV7aGoNF6am60K6/DUpHF0I
TLSH
T175E3CF2AD6D7DA62873356336F332D6C163987AFB10A9000B12E366A5F35D9D0393397
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLS5-INT-VINS.exe

Path C:\Program Files\DSC\DLS IV\DLS5-INT-VINS.exe
Size 44.7MB
SHA256 b47e564efb3a5bec65d261e5bdc48cfd45f62168ae5188f550f9cf6b66ee20bb
MD5 26e696e6cef5a258ab8b01a24e5235d3
SHA1 fb554dc58281086e68fde463934284707117ef26
SHA512 9947b869048fa324939e41c6a6ac151f3ace548e295d8049a775dc1ea78e9bd5d3e8b0a49406e9e116b3a6a537ef1a723ace2b94924846226718b5c18e8ac548
SSDEEP 786432:X5mZABP37SLFqNoVc453aQ4AtYuDbFESqhpBPMBrflfgBaNnJ/XRcWyGv:pmCBPOFSoVc4f4GPDxjqhpB8poBir
TLSH
T121A73345C9475F09C7B0DEB3048F9C263E9D8F1F1C971A2760B6EA774A62886B034DE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLSInstallUtility.exe

Path C:\Program Files\DSC\DLS IV\DLSInstallUtility.exe
Size 843KB
SHA256 0faecdb3f826c2c60c95db5e4549aabc9ff5346165700357b9126c7db958c2f6
MD5 e03d316c0a193520ae597732fc010da2
SHA1 05fd17306b094adc946f499c101d6c9f3828dec4
SHA512 5ece945d5979b94767f2887c1e35c33995daf1a97bcc9f7a37c25cd1f29090aebd312e31b03107da33b933c13ecdeafb3cd981f576ce94f1a2a145e87223fc09
SSDEEP 24576:dUry86hJvA8SgqUJH6MHHLnMMaKDH6MHHFnMMV:dUOhJvA84R6MMaKWWMMV
TLSH
T1A605F74673ADC810E5B6327ACAEF58315737AC816E02D78E2E89379E4931253BC1761F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLSInstallUtility.exe.config

Path C:\Program Files\DSC\DLS IV\DLSInstallUtility.exe.config
Size 1006B
SHA256 554b010f66b257391275a063ccd4802a40ee95336d05c0fa24cecc3b2b2928bf
MD5 0e35ef5932308a7da49f692aca609599
SHA1 7d96500cc576679021115c6cbd37872340f28876
SHA512 40ffd526ea051cc437005e5642ab652a0b9e05e00c100c1ba4062cb57f193b7ef4fb63106f3cebb41dbc80817675de71254b8828d10069be0defb45c13065d7f
TLSH
T13F1178A4B3C83BF684D2C5539D7354E0A72BED71119F20E8B5CEA12327D2C287515326
MD5 SHA1 SHA512 TLSH

Submit Download

Delete_FixedData_From_DLSPRONET.sql

Path C:\Program Files\DSC\DLS IV\Database\Change Scripts\Delete_FixedData_From_DLSPRONET.sql
Size 2KB
SHA256 8ec8a6e2d97515a725b05eb8478a63e2687c738876de4fa69bfade5e98ab224a
MD5 addf549d86143a1734e49f3821ac7f17
SHA1 5e9d1231f2d4c733a3767f33aea2b72e66b4939b
SHA512 03725abac96b166a8c55a94534604920dd4cf81acd8e927cfaf4541c519a8acfaf89ed3cad0fc590a83345e31d4bac306d5afc88cacc2396cd58c501e1d00a77
TLSH
T1DA514BA173478BA230FFC257FED9000AE67594DFEA7014313448A4B5CD9B5E4AD1F98A
MD5 SHA1 SHA512 TLSH

Submit Download

Drop_Constraints_From_DLSPRONET.sql

Path C:\Program Files\DSC\DLS IV\Database\Change Scripts\Drop_Constraints_From_DLSPRONET.sql
Size 12KB
SHA256 aca76e60f6a591fbb808f931ec8b263b7195823674b3564e12c6f0c4702f69b1
MD5 e4855c3cf72e9e5c1c16affd78553b47
SHA1 ef7bde98f2463c6bee0cdf3f9b251afa733bed48
SHA512 40d191e9b77043f83454218ce92900697ff7919aeab1881db18744a2433618141efbece6bbfcf87675089efa70e17d34b74b4c8c7ea768ffc1d1418473dd90be
SSDEEP 192:HHa861qnZCZAZgbLLZj2yPmqWGpYC07ZgObYwMm/aiayaqq9nmoCDgBcggBPbgB+:HwYvQH8
TLSH
T177429F02ED12E477606BA76994B014DCD9791CC3A9E36ABBF0B0E5D7CB386045EB7243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MCPH.exe

Path C:\Program Files\DSC\DLS IV\MCPH\MCPH.exe
Size 259KB
SHA256 caaa1aedd0ab421f501ebcc026f604df04dc27cf35e5f7d8de160cc0a1dd73c9
MD5 20dbc0167a990329bfd47148fa6789df
SHA1 3d128f5630acf5336034b587453585d965bb0fda
SHA512 fb8fd9bc7188d91922e6288a72743b42bd1f0f20270d027d3092de5a6e7ce353be3f4efe2530931d3df5420e634eb9eac5b074c0a79c3105f5cfac7e91cb3e37
SSDEEP 3072:/8Zu5fib5Ia2rPmWjGkPGZf37o7KIzPmouH5ImBlVVVetH0BW3rF8:/8ZuU5IPr2kPekmIKZH5blsUBW3W
TLSH
T1D44408322B898B75DA622072ECB947FE741AE9590B6426C783CE471E8D785C30731D7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Data.SQLite.dll

Path C:\Program Files\DSC\DLS IV\System.Data.SQLite.dll
Size 330KB
SHA256 d25129274913ff3b0717e22792018d6633e8a0891a3f773fc192eaa5961d0cec
MD5 c28eb6c7b3f2d94262443bb22b6732f6
SHA1 61aefe69f46a99030e6d82b3791c27694a2ff30d
SHA512 92a84f6d5fa4f69ae9311480ef68a45c1c920c78bb2bada841a9a87a29857cd7e4d9d7bff9a94c9b0b5be43ae11fb331c93b341699c66fe1676602e79bbdb274
SSDEEP 6144:sz+i1+2p9M950ALI9668Ky8iHG9lKdC6owQ1+4EI/GdqMTzMTjGTrBaFNFaFeFOs:q+i1+o9Mn0oI9f8Ky8iHK6XCjGvBaFN7
TLSH
T1C3744B9427DC2A1AE1FF5778E8B19884C770F4529AA6D31D7CC024F95C62B00E953BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLSInstallUtility.resources.dll

Path C:\Program Files\DSC\DLS IV\en\DLSInstallUtility.resources.dll
Size 260KB
SHA256 84edfc5185f45592e3dc38f735d4d25d981e4c3e5560becee496df4ee4a08a99
MD5 c85c8c43839559cdd78965bb15f8d8ec
SHA1 80e87f0a09e99bcb37a091e22defceb2eacf8758
SHA512 64b31d070f9afafd44055ad8fb99d97df69ba93091d897c796408602730b137219881c1ef1c7a63ee0dd1cd95d085aeeeb42e6de48d33e76c6d4d823d8b8aecc
SSDEEP 6144:WK58JH8Z85ADVKdpiWH6NSHHESva0LMMxwK:WK58Si5ADUjJH6NSHHLjLMMaK
TLSH
T124443B8167FD98A4F4B78BB4797A8E761B3BBCED5820D05DA1503A0D0831D62A5B3733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcredist_x64.exe

Path C:\Program Files\DSC\DLS IV\vcredist_x64.exe
Size 14.5MB
SHA256 871983b6b4c3bce1b5b9ae2173c818137c8831c818393268fb2f0414c096e241
MD5 4b0e07f7731f5c4e72c4a1726e532ce1
SHA1 514b622144e7bde76b52e369e91b05a59d0e1b96
SHA512 144e36adcf17d37e50f1d2ab8cb55ef438d14c2b53e3911f0d4c556698dd8c682a9da38e475ecaca2082492fb249d1d88a855a960978277c14d0863f20b37534
SSDEEP 393216:kLolp+dkBSuF2SfUfn6aDu08CN+g51pxy9+a+bo:kop+Ty2SfUfn2EN+4pxxbo
TLSH
T1A2E63332B7AC453BDA970873BDAAF9203E7D650D732045ABD248DD1D2A7929317F7202
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcredist_x86.exe

Path C:\Program Files\DSC\DLS IV\vcredist_x86.exe
Size 13.7MB
SHA256 54133dc6e13d775199bbec9268ae5e54063f9c6cb7b630f7865704cc64f50774
MD5 4ae35849e82945e117cefb28a83c2f8f
SHA1 6b8151a85e062d43ccdcbe2b7b932656ea81828e
SHA512 44b68ea6a4a469582e566d9bbf139f98733c7ebb85d449b8e3d62c1b245a74bbfeb93e8b27cca12027dbf58edbafe9e784946df734f1ce773a8b096026c5df0b
SSDEEP 393216:L3olp+dkBSuF2SfUfn6MLw5XUdQbcKLXU9W0Jgqf0vf8:Ap+Ty2SfUfn6udocKjUU0JHif8
TLSH
T160E63333E698813FCAA70533A965E6607F7D6528332040F7D348ED6E1A781A757FB212
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLSInstallUtility.xml

Path C:\ProgramData\DSC\DLS\LogFiles\DLSInstallUtility.xml
Size 1KB
SHA256 ed1619a3d6cf0ec63ed82f9f885765c0f85164bd46042e8c3e169348d8e889f5
MD5 d03dabcc3b5a3c33d803d4c31a71042d
SHA1 bd4f6ef5e2b077cce89c4a04cb98a5b6f6273a39
SHA512 e8e0ecf9ea8c610b074421a3a5a58e479d54763cbe4de288948a0b230cb1d3a69e253280bc1966f9ec26d7ca00e89f47893ef6dd06f67ec23532b63ec4704b1c
TLSH
T1D421EEFE11DAB73C738925240855661F41515864C94F130BFAE5CFBB64AB82E826813A
MD5 SHA1 SHA512 TLSH

Submit Download

DLSInstallUtility.xml

Path C:\ProgramData\DSC\DLS\LogFiles\DLSInstallUtility.xml
Size 2KB
SHA256 d0db2e1fbdac74739efa36dfaaaedd41a2c709518c3320323b7fccfaa5beb796
MD5 0e9ac79c502766be93c96170839a892a
SHA1 1ebc01c259f645f22a5698ffb28c412ff3671c83
SHA512 5479e6adc1d8dce32b10d332e1e3acc912e2d5defb01e58f240d35f7d7148c103a34abf8c9e3644b610e19ef6471d7fcde27d3696af9b101078bfc2555f45324
TLSH
T14551F9FF11DAB77C33C936204E656A1F11224915C90E130BFAE58FAB606F82D8679276
MD5 SHA1 SHA512 TLSH

Submit Download

ServiceInstallation.log

Path C:\ProgramData\DSC\DLS\LogFiles\ServiceInstallation.log
Size 1KB
SHA256 77ce2de9ddc9f8cd1a712a1a1202ef27edde8135e23899685fd3a4f311363405
MD5 24e1e2e50aab4e4888466503d2c73722
SHA1 0722f176d4275fe8b389c8e7b2d4ac7db0611117
SHA512 03244814c2954c03ca5147e49081cf512ee4813483c2b7204600f1036153c1e4da63213c166c82c6afdbc74f28e44439b46fbe7e1655e65ad1a4574ecb40a6df
TLSH
T173217F0DACD997E17699B349DF476811E39DCC80250D28236BD7970FA0E4F4847167F2
MD5 SHA1 SHA512 TLSH

Submit Download

ServiceInstallation.log

Path C:\ProgramData\DSC\DLS\LogFiles\ServiceInstallation.log
Size 1KB
SHA256 3abd657db399642d9f29845cd75bb10bedcd605ec91428d311026d455fcdac77
MD5 bbd0eac8cb65fd8a7280726a4dc500da
SHA1 916f93737a2faa2cf828d5a7795a09b9dd2777a9
SHA512 4da6ece8eeed5526ceb4725f9cbfd7f97ad5c452ee7842c298026f2fc70cbabee6b45caeb2a69ef952a4d7e3113fb8f745b21ef68905eb27a0527d7f97ab6859
TLSH
T11E218E0DACDA57E27599A348DB476411E39DCC94350E28236BD7970FA0E0F888702BF2
MD5 SHA1 SHA512 TLSH

Submit Download

ServiceInstallation.log

Path C:\ProgramData\DSC\DLS\LogFiles\ServiceInstallation.log
Size 2KB
SHA256 4f3b4691753d3a7cea68c5ad7995a53275219f548064615d5add6f73a6b0bdf4
MD5 8901bb083041987f3d9a3c4c57cdcdd2
SHA1 ca798ac566cd6c4d086e9c4663461aae55ef5175
SHA512 f5a8d650e915df3b111a0cb7028d392a097aa70304c3c00de3d16e01030004b81beff3a1f276c5564cf0c004e3f778bf563e72ff4d18bb409263de68d4a0286a
TLSH
T172518E0DACDA57E27599A348DB476411E39DCC94350E28236BD7970FA0E0F888702BF2
MD5 SHA1 SHA512 TLSH

Submit Download

AppConfigEncryptionTool.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\AppConfigEncryptionTool.exe.log
Size 1KB
SHA256 1af68979d9d6ddbfb01f82a305d833cfdffbf75c00790c0c2c0317dc9e4a8ea4
MD5 d4546683c96abd5c9ec44a8c981aea6d
SHA1 cd8571202254c04f004010db4a029ae69fb616e0
SHA512 cee514b1e9fffeedb45c1a47fe29050fd8e622603005448072a532da7af862f51decd8d0511e4496933c1ec4e332dc937b44cf49a2148959978c56735a133a90
TLSH
T1CD21BB712276B1D889163F461C5D2AC007BF0739BA90DE1CB9A9725EDD260175F222F3
MD5 SHA1 SHA512 TLSH

Submit Download

DLSInstallUtility.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\DLSInstallUtility.exe.log
Size 1KB
SHA256 64d558f3b70aca4098bc2f24fe4a1c0c68ae05f4d82683255bef45fcb6026478
MD5 13137729c77a7d8bf8f08873f4cf7298
SHA1 c940455e4a4601ae4a0dd109b24b8e9f6eddc582
SHA512 9d2770f5977093f5e90700ac6d294216b9a79a02236e9db2f4bf6aff0e78c8bbb2ebf6abc36e89bf6829fc9ccc1343f522cb31df7eccbf2f17f1b82e794eb38d
TLSH
T1CB31A0712276E1E889063F421C5D26800BFF0735B550DE1CB6E8725EED2601B1F222F3
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetChecker.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx7E45.tmp\DotNetChecker.dll
Size 84KB
SHA256 39c43d67f546fc898f7406d213b73dcb1bc30fc811ddfa3a02b6b50c29d11f91
MD5 f18364fa5084add86c6e73e457404f18
SHA1 6d87c4b9dbf78af88fddf0d4d5febe845c8e4e6a
SHA512 716892492390fe4314f3289286f733d07b8b84de1f5af0676b26e68c0be01808682d35ad2bb9e9491247b7bb5a0ea297a6850e26de9baf88621c789206107db3
SSDEEP 1536:AZBjgSXlkq8su+OudgGpGlmQSMqJS4HGsorJKQUDs0OsWPIcdGbk2HeJ:AYvo7PMqEuiKQGbk2HeJ
TLSH
T14D835B1076D0C1B5E57F1D3948A6D661076EB810EFE4CDEB279A03690E702C1BE3AE23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LangDLL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx7E45.tmp\LangDLL.dll
Size 5KB
SHA256 47b9e251c9c90f43e3524965aecc07bd53c8e09c5b9f9862b44c306667e2b0b6
MD5 a1cd3f159ef78d9ace162f067b544fd9
SHA1 72671fdf4bfeeb99b392685bf01081b4a0b3ae66
SHA512 ccc70166c7d7746cd42cd0cec322b2adf4a478ff67c35d465f0f0f5b2b369c996a95557b678c09cb21b8311d8a91eed4196ddc218ea7d510f81464669b911362
SSDEEP 48:apTVWFeApYx2lxaKe3yfeEIWCGWNpBWLGGrx3pMt4z8mtJ7HofYZVSLa:RFG0xaKkyfjIWTW7BYrhSbmtJ7/V
TLSH
T1D8B18331F3C08CF5C692453A28D337D6AA56BA141748445FCBA726AB2910DEBEF3D781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Splash.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx7E45.tmp\Splash.dll
Size 4KB
SHA256 622601b531431e7a5ca1a65a4dd24dd0f9f54f3d0b65479b3f266d952b468768
MD5 afa6819a9f17e55a426205669e360c85
SHA1 d7a0ff8efea4bcf7bc79c2a80bf6573077871b6a
SHA512 b2edae4c0f445a88ef7f7c993177c0bf4c5a655ce98a775dc2df6c5cc6ab551c73af3a1c718e1e6da5c4026fa64831e241a1068e9ed06d7cc18f9f186e5f4194
TLSH
T17981633F738BC6F3DA2702376D5612D707A1807937209519882349E4BAA69DFDC14703
MD5 SHA1 SHA512 TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx7E45.tmp\System.dll
Size 11KB
SHA256 7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
MD5 bf712f32249029466fa86756f5546950
SHA1 75ac4dc4808ac148ddd78f6b89a51afbd4091c2e
SHA512 13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4
SSDEEP 192:0N2gQuUwXzioj4KALV2upWzVd7q1QDXEbBZ8KxHdGzyS/Kx:rJoiO8V2upW7vQjS/
TLSH
T1DC3229328B60C1F2D561C274496B3A3367B9761420B04D67DFB78446EC16AD66E3E327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserInfo.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx7E45.tmp\UserInfo.dll
Size 4KB
SHA256 6293408a5fa6d0f55f0a4d01528eb5b807ee9447a75a28b5986267475ebcd3ae
MD5 c7ce0e47c83525983fd2c4c9566b4aad
SHA1 38b7ad7bb32ffae35540fce373b8a671878dc54e
SHA512 ee9f23ea5210f418d4c559628bbfb3a0f892440bcd5dc4c1901cb8e510078e4481ea8353b262795076a19055e70b88e08fee5fb7e8f35a6f49022096408df20e
TLSH
T14481777F63B448B3E45907BB03A614D711E2D530530B401E498F1E6A1885DA7FD6E717
MD5 SHA1 SHA512 TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx7E45.tmp\nsDialogs.dll
Size 9KB
SHA256 416133dd86c0dff6b0fcaf1f46dfe97fdc85b37f90effb2d369164a8f7e13ae6
MD5 4ccc4a742d4423f2f0ed744fd9c81f63
SHA1 704f00a1acc327fd879cf75fc90d0b8f927c36bc
SHA512 790c5eb1f8b297e45054c855b66dfc18e9f3f1b1870559014dbefa3b9d5b6d33a993a9e089202e70f51a55d859b74e8605c6f633386fd9189b6f78941bf1bfdb
SSDEEP 192:SbEunjqjIcESwFlioU3M0LLF/t8t9pKSfOi:SbESjFCw6oWPFl8jfOi
TLSH
T1DE121A636694D5BBC2D2123736A53752CBA92338F0265C05CBB78E867D646C57E3A302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

license.rtf

Path C:\Users\Admin\AppData\Local\Temp\{58b3beca-b999-4f6f-a48c-81681136a620}\.ba1\1055\license.rtf
Size 177KB
SHA256 f79108a254f876e0f6bbcb05a9effbe25dc252e7ea256bfe3fd28ceb79737f25
MD5 f1a281f74d3e91d16dd26d1f313cd8a9
SHA1 ddb2ca9032c5a9c091eac53b679f6ba428077b00
SHA512 484c5ca26275427e1fb74d3217a22a0e4aac409aba973e78d7ad68834e7ad1d86c7855d34b227925200f941d288dfc09477b2d7dfe0856810c6c847297b8d625
SSDEEP 3072:3/Qfs1vJ0gJ68SfSRJj7Jnk/O1BEBrV3H/zI9uu4GyKcpwQ53p/L5cAN/3qvS70z:Y/N59E
TLSH
T167041DB840419694D26282779E68F5489B32F00964FCF4DCD39DE3B9F07EEA46BE8447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.png

Path C:\Users\Admin\AppData\Local\Temp\{58b3beca-b999-4f6f-a48c-81681136a620}\.ba1\logo.png
Size 1KB
SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
MD5 d6bd210f227442b3362493d046cea233
SHA1 ff286ac8370fc655aea0ef35e9cf0bfcb6d698de
SHA512 464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b
TLSH
T1CF312CF34748B7A7D30581351471819AD242FFD8F9CE291E35CD5307664018115C75CF
MD5 SHA1 SHA512 TLSH

Submit Download

wixstdba.dll

Path C:\Users\Admin\AppData\Local\Temp\{58b3beca-b999-4f6f-a48c-81681136a620}\.ba1\wixstdba.dll
Size 126KB
SHA256 25ee85c14c9be619b4f0bf783963ace1dc0af0e802014728c2a2ca8da213d31d
MD5 a973cfa4951d519e032f42dc98a198b0
SHA1 2ba0f1e1570bc2d84f9824d58e77b9192ea5dd94
SHA512 b4a8c4f08a51bdd9ce7708fe8e2477182a52f1d853954eb5af0430c2df99839b6076a7d93b00391a73d446a6ad9da3ed77ef79c8b23353d32c72fc540415b8ef
SSDEEP 1536:vw7WzpopAuJhsVuThs5cXyeM6JUOfPGSpeBxm946ITADDwYkH/1d9chyP7iN6p0x:RmAuJhAyZFpem90iw//1d9chwG62MG
TLSH
T114D36D113BF48072E5E2163C5A65E3216E7FBA315970D9CF6B484A6E2E712C1DF36322
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

license.rtf

Path C:\Users\Admin\AppData\Local\Temp\{e9d78d68-c26c-4da7-9158-99355d8ef3ad}\.ba1\1031\license.rtf
Size 137KB
SHA256 442ad9e5b34d2a0aee3cd0450af51c6638a23ebd9771914428794bb8d4396a4d
MD5 3c9f6f7aa38511f964ffb18a9d96c95d
SHA1 f270e60ef78590e691b2619474a99844c1a5c396
SHA512 47d29f8457038a2a1cd7506e20c4b2df3707d424045dbd1ff4ab55746dfd549309044ed951d91d5f92a809d90124f19780c70f842060789a9db9824eb1b0ef1c
SSDEEP 768:+kp1nvUxJsjcyHTE4cJyHUErL04iAh+u6fcLIrJ6yyQ5hN6NNdQOAfet3qm+ZqRO:+K17HBmjktN3JieZTm
TLSH
T1D9D386BC408593D5D27BC345EC1DF08DA831F10564F9B0E4A3AEC3B9947EE59AE25A0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1152-2256-0x0000017A510E0000-0x0000017A5132A000-memory.dmp

Download

memory/1152-2255-0x0000017A35740000-0x0000017A3574C000-memory.dmp

Download

memory/1152-2257-0x0000017A51860000-0x0000017A51D88000-memory.dmp

Download

memory/1152-2292-0x0000017A35DC0000-0x0000017A35DC8000-memory.dmp

Download

memory/1152-2290-0x0000017A37410000-0x0000017A37422000-memory.dmp

Download

memory/1520-2234-0x0000000005DA0000-0x0000000005DB2000-memory.dmp

Download

memory/1520-2201-0x0000000005420000-0x00000000054FC000-memory.dmp

Download

memory/1520-2235-0x0000000005E00000-0x0000000005E3C000-memory.dmp

Download

memory/1520-2196-0x0000000002D10000-0x0000000002D2A000-memory.dmp

Download

memory/1520-2215-0x00000000059C0000-0x0000000005A80000-memory.dmp

Download

memory/1520-2197-0x0000000002D50000-0x0000000002D58000-memory.dmp

Download

memory/1520-2221-0x0000000005B20000-0x0000000005BB2000-memory.dmp

Download

memory/1520-2195-0x0000000000AA0000-0x0000000000AAC000-memory.dmp

Download

memory/1520-2225-0x0000000005AB0000-0x0000000005AC6000-memory.dmp

Download

memory/1520-2202-0x0000000005410000-0x000000000541A000-memory.dmp

Download

memory/1520-2230-0x00000000065C0000-0x000000000680A000-memory.dmp

Download

memory/1520-2231-0x0000000005D30000-0x0000000005D96000-memory.dmp

Download

memory/1520-2226-0x0000000005AD0000-0x0000000005AEA000-memory.dmp

Download

memory/1520-2219-0x0000000006020000-0x00000000065BC000-memory.dmp

Download

memory/1520-2220-0x0000000006B70000-0x0000000007114000-memory.dmp

Download

memory/2824-2608-0x000001A4713B0000-0x000001A4713D6000-memory.dmp

Download

memory/2824-2607-0x000001A471F00000-0x000001A471F3A000-memory.dmp

Download

memory/2824-2602-0x000001A471F60000-0x000001A471FB8000-memory.dmp

Download

memory/3756-2539-0x000001F5FC180000-0x000001F5FC18A000-memory.dmp

Download

memory/4628-51-0x0000017153230000-0x0000017153240000-memory.dmp

Download

memory/4628-56-0x0000017153230000-0x0000017153240000-memory.dmp

Download

memory/4628-55-0x0000017153230000-0x0000017153240000-memory.dmp

Download

memory/4628-54-0x0000017153230000-0x0000017153240000-memory.dmp

Download

memory/4628-53-0x000001716E9F0000-0x000001716EA38000-memory.dmp

Download

memory/4628-50-0x0000017151400000-0x00000171514D6000-memory.dmp

Download